What a Senior } should know

Applies algorithmic thinking to cloud infrastructure: resource scheduling algorithms for cost optimization, auto-scaling algorithms based on demand prediction, load balancing algorithms across availability zones. Designs efficient infrastructure provisioning algorithms minimizing deployment time and blast radius.

Designs code quality standards for cloud infrastructure code: Terraform module structure, CloudFormation best practices, IaC linting (tflint, checkov). Refactors monolithic infrastructure definitions into reusable, versioned modules. Establishes review practices for security compliance and cost optimization in IaC.

Selects optimal data structures for cloud infrastructure: state file structures in Terraform for efficient plan/apply cycles, resource dependency graphs for provisioning order, tag taxonomies for resource organization. Optimizes infrastructure data models for multi-region consistency. Designs efficient configuration structures for scalable cloud resource management.

Designs S3 storage architectures with lifecycle policies, cross-region replication, and intelligent tiering. Implements bucket policies and access points for multi-account environments. Mentors on cost optimization.

Designs Ansible automation architecture for enterprise cloud infrastructure with multi-cloud support, encrypted secrets management via Ansible Vault, and CI/CD integration for infrastructure-as-code pipelines. Implements advanced patterns including custom modules for cloud-specific operations, Ansible Tower/AWX workflows for complex provisioning sequences, and idempotent drift detection playbooks. Optimizes Ansible execution performance for large cloud estates through parallelism tuning, fact caching, and connection pooling strategies.

Designs complex AWS architectures: multi-account strategy (AWS Organizations, Control Tower), landing zones, cross-account access. Optimizes costs through Reserved Instances, Savings Plans, Spot Fleet. Introduces Well-Architected Framework and conducts architectural reviews.

Designs infrastructure solutions with CDN and Edge Computing. Optimizes cost and performance. Introduces best practices and security hardening.

Designs infrastructure solutions with Container Security Scanning. Optimizes cost and performance. Introduces best practices and security hardening.

Designs containerization strategy for cloud services: standardized base images, build pipeline with CI caching, runtime configuration through environment variables and secrets. Optimizes cold start for serverless containers (Fargate, Cloud Run).

Designs infrastructure solutions with Google Cloud Platform. Optimizes cost and performance. Introduces best practices and security hardening.

Designs infrastructure solutions with Helm. Optimizes cost and performance. Introduces best practices and security hardening.

Designs infrastructure solutions with Kubernetes Advanced. Optimizes cost and performance. Introduces best practices and security hardening.

Designs production Kubernetes clusters: choosing between managed (EKS/GKE/AKS) and self-managed, namespace strategy, quota management. Configures cluster autoscaler, spot/preemptible instances, node groups. Introduces GitOps approach to resource management.

Designs infrastructure solutions with Load Balancing. Optimizes cost and performance. Introduces best practices and security hardening.

Designs infrastructure solutions with Microsoft Azure. Optimizes cost and performance. Introduces best practices and security hardening.

Designs enterprise network architecture: hub-and-spoke topology through Transit Gateway, shared VPC, PrivateLink for inter-service communication. Introduces network firewall, traffic mirroring for analysis, IPv6 dual-stack. Optimizes latency and data transfer costs.

Designs infrastructure solutions with Pulumi. Optimizes cost and performance. Introduces best practices and security hardening.

Designs infrastructure solutions with Serverless Containers. Optimizes cost and performance. Introduces best practices and security hardening.

Designs infrastructure solutions with Serverless Functions. Optimizes cost and performance. Introduces best practices and security hardening.

Designs modular Terraform architecture: reusable modules for VPC, EKS, RDS, remote state with locking, workspaces for multi-environments. Introduces Terragrunt for DRY configurations and automates plan/apply through CI/CD with review process.

Designs infrastructure solutions with VPN and Network Isolation. Optimizes cost and performance. Introduces best practices and security hardening.

Designs infrastructure solutions with Yandex Cloud. Optimizes cost and performance. Introduces best practices and security hardening.

Designs ArgoCD architecture for multi-cluster cloud infrastructure management with ApplicationSets and cluster generators. Implements advanced GitOps patterns including progressive delivery integration, drift detection alerting, and secret management with Sealed Secrets or SOPS. Optimizes ArgoCD performance for large-scale cloud deployments with resource tracking and caching strategies.

Designs CI/CD architecture with Blue/Green Deployment. Optimizes pipeline speed and reliability. Introduces progressive delivery.

Designs CI/CD architecture with Canary Deployment. Optimizes pipeline speed and reliability. Introduces progressive delivery.

Develops reusable workflows and composite actions for infrastructure pipelines: standardized IaC pipeline (validate→plan→approve→apply), automated module updates, scheduled drift detection. Integrates security scanning (tfsec, checkov) and cost estimation.

Designs security architecture: centralized security account, cross-account CloudTrail and Config aggregation, automated remediation. Introduces infrastructure security scanning in CI/CD, compliance-as-code through AWS Config Conformance Packs. Conducts security review of architectural decisions.

Designs application security architecture. Conducts threat modeling (STRIDE). Introduces security testing in CI (SAST/DAST). Designs secure defaults. Runs vulnerability management process. Trains the team on secure development.

Designs secrets management architecture: Vault cluster in HA configuration, auto-unseal through KMS, audit logging. Introduces secret rotation for database credentials and API keys. Integrates with Terraform through Vault provider and External Secrets Operator in Kubernetes.

Integrates AI assistants into infrastructure workflows: policy-as-code generation, automated architecture decision documentation, scaffolding new modules. Trains the team on effective prompting for cloud-specific tasks and establishes usage guidelines.

Designs capacity planning architecture for multi-cloud environments. Implements predictive scaling with ML-based forecasting, cost optimization strategies, and reserved capacity management. Makes ADR decisions on scaling patterns and resource allocation.

Designs DR architecture for multi-cloud environments: pilot light, warm standby, and multi-site active-active patterns. Implements chaos engineering for DR validation. Makes ADR decisions on RPO/RTO trade-offs and cost optimization for resilience.

Designs high-load cloud systems: multi-region deployments, global database (Aurora Global, Spanner), CDN for latency reduction. Optimizes throughput through connection pooling, read replicas, event-driven architectures. Introduces load testing and chaos engineering.

Designs complex distributed systems in cloud: saga pattern for distributed transactions, CQRS with DynamoDB Streams/Change Data Capture, multi-tenant architecture. Documents architectural decisions through ADR and conducts system design review.

Designs logging architecture for cloud platform: multi-account log aggregation, cross-region replication, retention policies with lifecycle management. Optimizes cost — hot/warm/cold tiers, sampling, log levels management. Introduces structured logging standards.

Designs on-call processes for cloud team: alert routing by services and severity, runbooks for common incidents (disk full, OOM, AZ failure), post-incident review process. Optimizes alert noise — deduplication, suppression rules, actionable alerts. Reduces toil through automation.

Designs distributed tracing architecture: OTEL Collector pipeline with processors (sampling, filtering, enrichment), tail-based sampling for cost optimization. Integrates traces with logs and metrics through correlation. Introduces custom instrumentation for cloud SDK calls.

Designs observability stack: Thanos/Cortex for long-term storage and multi-cluster aggregation, Grafana Mimir for scalable metrics storage. Optimizes cardinality, retention, recording rules. Introduces Prometheus Operator for GitOps-managed monitoring in Kubernetes.

Designs SLO framework for cloud platform: composite SLOs for distributed systems, dependency-aware SLOs, SLO-based deployment gates. Introduces error budget policies — automated rollback on budget exhaustion, feature freeze processes. Integrates SLO with incident management.

Designs structured logging standard for cloud platform: unified schema for Lambda/ECS/EKS, correlation through X-Ray trace ID, enrichment with cloud context (region, AZ, instance type). Automates compliance — PII masking, data classification in logs.

Conducts deep architectural review of infrastructure changes: evaluates blast radius, cross-service impact, compliance implications. Reviews modular structure, state management, security posture. Mentors colleagues through review and establishes IaC code quality standards.

Designs documentation-as-code for cloud platform: auto-generated architecture diagrams from Terraform state, self-documenting modules with examples, automated docs pipeline in CI. Introduces Backstage/internal developer portal with up-to-date infrastructure documentation.

Designs Git workflow for infrastructure repositories: monorepo vs polyrepo for Terraform modules, branching strategy for multi-environments, automated changelog generation. Introduces conventional commits, semantic versioning for IaC modules and CODEOWNERS for review.

Designs systematic approach to runbooks: standardized format, integration with incident management (PagerDuty), automated runbooks through SSM Automation/Rundeck. Introduces executable runbooks — markdown with embedded scripts. Conducts regular gamedays for runbook validation.